JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

116.99.175.51

Recent Activity

Abuse Confidence Score

100% Critical

220 reports

193 reporters · latest 21 hours ago

ISP: Viettel Group
Usage Type: Fixed Line ISP
ASN: AS24086
Domain Name: viettel.com.vn
Country: 🇻🇳 Viet Nam
City: Da Nang, Da Nang City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

220 from 193 distinct reporters

First reported

November 11th 2026

Most recent report

21 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 30 🇦🇹 Austria 18 🇬🇧 United Kingdom of Great Britain and Northern Ireland 16

Most common categories Brute-Force 205 SSH 202 Port Scan 12 Web App Attack 5 Hacking 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-11-13 09:01:38 UTC · (21 hours ago)	Unauthorized access attempts on ports: 22	Brute-Force SSH
🇫🇮 syscfg	2026-11-13 07:05:34 UTC · (23 hours ago)	Cowrie SSH honeypot: 504 attempt(s) from 116.99.175.51. Period: 2026-11-11T06:09:57 to 2026-11-11T06:17:38 UTC. Usernames tried: thomas, kim, joggler, user, ftpuser. Passwords tried: thomas, joggler, user, 1111, abcd1234. Source: Cowrie honeypot (SSH ... show more Cowrie SSH honeypot: 504 attempt(s) from 116.99.175.51. Period: 2026-11-11T06:09:57 to 2026-11-11T06:17:38 UTC. Usernames tried: thomas, kim, joggler, user, ftpuser. Passwords tried: thomas, joggler, user, 1111, abcd1234. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇩🇪 ecs.ge	2026-11-12 23:47:29 UTC · (1 day ago)	Automatic Fail2Ban report from jail ssh: multiple matching events detected.	Brute-Force SSH
🇫🇮 syscfg	2026-11-12 07:05:34 UTC · (1 day ago)	Cowrie SSH honeypot: 504 attempt(s) from 116.99.175.51. Period: 2026-11-11T06:09:57 to 2026-11-11T06:17:38 UTC. Usernames tried: kim, ftpuser, admian, office, auto. Passwords tried: abc123, lifesize, welc0me, office, explorer. Source: Cowrie honeypot ... show more Cowrie SSH honeypot: 504 attempt(s) from 116.99.175.51. Period: 2026-11-11T06:09:57 to 2026-11-11T06:17:38 UTC. Usernames tried: kim, ftpuser, admian, office, auto. Passwords tried: abc123, lifesize, welc0me, office, explorer. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇦🇹 kuppit	2026-11-12 07:00:47 UTC · (2 days ago)	Honeypot bot from VN: 83 SSH login attempts; first 2026-11-11 08:13:35, last 2026-11-11 08:21:06	Brute-Force SSH
🇬🇧 andypiper	2026-11-12 02:00:51 UTC · (2 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-11-12 01:15:02 UTC · (2 days ago)	2026-11-11T09:02:29.300890+01:00 enterprise sshd[931751]: Invalid user test from 116.99.175.51 port 46722 2026-11-11T09:02:34.909084+01:00 enterprise sshd[931761]: Invalid user admin from 116.99.175.51 port 46728 2026-11-11T09:02:35.294889+01:00 ente ... show more 2026-11-11T09:02:29.300890+01:00 enterprise sshd[931751]: Invalid user test from 116.99.175.51 port 46722 2026-11-11T09:02:34.909084+01:00 enterprise sshd[931761]: Invalid user admin from 116.99.175.51 port 46728 2026-11-11T09:02:35.294889+01:00 enterprise sshd[931763]: Invalid user admin from 116.99.175.51 port 46740 SSH brute force activity observed. show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-11-11 23:35:00 UTC · (2 days ago)	Last 24 hours Brute Force Attacks	Brute-Force
🇧🇷 ICS Labs	2026-11-11 17:16:40 UTC · (2 days ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-11 UTC.	Brute-Force
🇺🇸 kot	2026-11-11 13:02:29 UTC · (2 days ago)	scan port 22, 116.99.175.51 block	Port Scan
🇨🇦 dpinse	2026-11-11 11:29:34 UTC · (2 days ago)	Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credentials: admin:admin, support:support, test:test, user:user, root:admin, root:@, config:config, support:admin, admin:123456, admin:0l0ctyQh243O63uD, admin:1234, admin:admin@1 ... show more Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credentials: admin:admin, support:support, test:test, user:user, root:admin, root:@, config:config, support:admin, admin:123456, admin:0l0ctyQh243O63uD, admin:1234, admin:admin@123, installer:installer, ubnt:ubnt, admin:admin123, squid:squid, admin:password, admin:default • Number of login attempts: 18 • Client: SSH-2.0-AsyncSSH_2.1.0 show less	Brute-Force SSH
🇫🇷 Vincent6785_0	2026-11-11 11:21:03 UTC · (2 days ago)	Sustained failed SSH authentication attempts recorded by a honeypot sensor network. Threat score: 22/100 (low) \| Phase: active_brute_force (sustained failures, recently active) Failed auth: 46 (0 bad password, 46 invalid user) \| 0 success \| 67 total ... show more Sustained failed SSH authentication attempts recorded by a honeypot sensor network. Threat score: 22/100 (low) \| Phase: active_brute_force (sustained failures, recently active) Failed auth: 46 (0 bad password, 46 invalid user) \| 0 success \| 67 total SSH log events \| seen on 1 sensor(s) Origin: Vietnam (VN) \| AS24086 Viettel Corporation \| 116.99.175.0/24 First seen: 2026-11-11 11:19:43 UTC \| Last seen: 2026-11-11 11:21:03 UTC Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot. show less	Brute-Force SSH
🇨🇦 kipfel★	2026-11-11 11:19:59 UTC · (2 days ago)	2026-11-11T06:19:38.461881-05:00 lw-dedi-hdz-48t-mtl sshd-session[1400897]: Invalid user admin from 116.99.175.51 port 35994 2026-11-11T06:19:46.064364-05:00 lw-dedi-hdz-48t-mtl sshd-session[1400926]: Invalid user user from 116.99.175.51 port 36000 2 ... show more 2026-11-11T06:19:38.461881-05:00 lw-dedi-hdz-48t-mtl sshd-session[1400897]: Invalid user admin from 116.99.175.51 port 35994 2026-11-11T06:19:46.064364-05:00 lw-dedi-hdz-48t-mtl sshd-session[1400926]: Invalid user user from 116.99.175.51 port 36000 2026-11-11T06:19:58.989554-05:00 lw-dedi-hdz-48t-mtl sshd-session[1401051]: Invalid user test from 116.99.175.51 port 57304 ... show less	Brute-Force SSH
🇨🇦 sh97	2026-11-11 11:19:55 UTC · (2 days ago)	CA02-HB-TOR: SSH Brute Force from 116.99.175.51 at 2026-11-11 16:49:55 IST	Brute-Force SSH
🇨🇦 Ssmidge	2026-11-11 11:19:53 UTC · (2 days ago)	Nov 11 06:19:45 vps-1 sshd-session[334734]: Invalid user admin from 116.99.175.51 port 48132 Nov 11 06:19:51 vps-1 sshd-session[334736]: Invalid user squid from 116.99.175.51 port 40084 Nov 11 06:19:52 vps-1 sshd-session[334738]: Invalid user admin f ... show more Nov 11 06:19:45 vps-1 sshd-session[334734]: Invalid user admin from 116.99.175.51 port 48132 Nov 11 06:19:51 vps-1 sshd-session[334736]: Invalid user squid from 116.99.175.51 port 40084 Nov 11 06:19:52 vps-1 sshd-session[334738]: Invalid user admin from 116.99.175.51 port 40086 ... show less	Brute-Force SSH

Showing 1 to 15 of 220 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 218.234.186.2

🇸🇬 212.73.148.19

🇩🇪 188.194.168.139

🇲🇽 187.189.64.159

🇷🇺 185.15.61.102

🇺🇸 68.225.62.159

🇺🇸 66.132.186.182

🇵🇹 213.22.240.5

🇧🇷 189.114.136.231

🇬🇧 188.240.59.35

🇩🇪 188.40.82.22

🇦🇷 186.109.7.118

🇲🇽 158.23.22.8

🇺🇸 156.232.13.246

🇷🇺 146.158.112.214

🇺🇸 143.105.191.212

🇧🇷 131.161.14.49

🇰🇷 125.130.102.172

🇬🇧 118.26.104.179

🇹🇼 114.35.59.237